Information about personal data processing

We have created this document about personal data processing and protection to help you understand how we collect, process and protect personal information which you have provided us, because privacy and personal data protection is very important to our company.

The company MEDIAN, s.r.o., Identification number: 48587001, with registered office at Prague 9, Národní hrdinů 73, 19012, registered in the Commercial Register kept by the Municipal Court in Prague under file no. C 17975 (hereafter only “MEDIAN”) declares that it will handle your personal data processed by it for the purposes of market research or opinion polls in such a way as to ensure the maximum possible level of protection in accordance with applicable legislation, the EU Regulation 2016/679 (GDPR) and other related regulations. MEDIAN, as a member of SIMAR (Association of Market Research and Public Opinion Agencies) and ESOMAR (International Organization for Public Opinion Research and Marketing Research) is also fully complying with the ICC / ESOMAR Code of Conduct.

About our surveys

MEDIAN’s surveys are conducted mainly using the CATI method (telephone polling), personal interviewing and online polling. The aim of our research is not collecting personal data about the respondents. In surveys, we inquire about attitudes towards different issues and themes, media consumption or consumer preferences and process them anonymously – as aggregate data describing the entire population or a large group.

Thanks to this we do not collect any personal data in a portion of our surveys. Sometimes, however, we need to get the contact details of the respondent in order to be able to verify the proper work of our interviewers and the correct conduct of the interview because the quality of the research data depends on that. Parts of the interviews are also being recorded for the same purpose. We sometimes need to collect personal data in surveys for administrative reasons – usually for the payment of incentives, or if the respondent agrees to be included in our online panel or respondents database. Some of our surveys may also include a so-called special category of personal data – sensitive data on health, religion, etc. These are also processed anonymously, but the respondent is alerted to their questioning.

Besides traditional declaration based surveys and qualitative surveys, MEDIAN also implements the adMeter project. Within it we monitor the consumption of TV, radio and internet using a mobile application on a panel of respondents. In this project, we have personal and contact details for payment processing purposes, communication with panellists, and other panel administration purposes. Measurement data is pseudo-anonymized and processed in bulk, and our measurement technology guarantees the privacy of respondents.

We always try to minimize the acquisition and processing of personal data in our research. We protect the privacy and anonymity of our respondents in accordance with applicable laws and ethical rules of our field.

Personal data

Types of personal data we process:

Personal data of employees, including service contract agreements for interviewers – this data is needed to fulfil legal and contractual obligations.

Personal data of respondents – for example identification and contact details for payouts, for checks on interviewers’ work (we do not require consent for these legal purposes), for storing the data in the database for subsequent contact in further surveys (consent required here).
The personal data of the respondents we process include, for example, name and surname, address, birth number, date of birth, contact details, socio-demographic data, eventually other data provided when registering for research participation, and data we process to meet our legal obligations or to pursue our legitimate interests. These are data that we acquire directly from you, from public sources (public lists and registers, online apps, etc.), from surveys or collaborating third parties.

Camera systems – to protect company and employee assets.

Access to personal data and your additional rights

A personal data administrator is, according to the legal definition, every entity that determines the purpose and means of the processing of personal data for the purpose of processing, collecting and preserving it. The applicable law then allows the administrator to entrust a processor who will process the personal data, which is any entity that, by virtue of a special law or mandate, processes personal data for the administrator. Therefore, your personal data may be passed on to MEDIAN interviewers, controllers or MEDIAN clients who assign surveys to MEDIAN and other external companies (for example, to pay incentives) who are required to process your personal data under a contractual agreement with MEDIAN. Even in these cases, you are guaranteed the same protection of your data as when it is processed by MEDIAN.

We place great emphasis on securing your personal data, confidentiality of our employees, adhering to internal guidelines and selecting contractual partners. Using a wide range of security technologies and procedures, we protect your personal information from unauthorized access, use or disclosure. The information you provide to us is stored on restricted access computer servers located in secure facilities.

When processing personal data, you have the right to ask us to provide you with the information which personal data we process about you, its purpose, the nature of its processing, and the recipients of your personal data. We will gladly provide you with all this information. At the same time, we are authorized to ask you to verify your identity to ensure that all such information is not provided to a third party.

If you believe that processing is being carried out in violation of legal regulations, you are entitled to request clarification or the removal of an eventual violation. At the same time, you have the right to contact the Office for Personal Data Protection in case of a violation of our duties with a request for remedial action. You also have the opportunity to request correction, completion or disposal of your data at any time.

Regarding the processing of your personal data, you have the following rights in particular:

Right to information on the processing of personal data

When processing your personal data, you have the right to know the identity and contact details of the administrator, his representative, the purposes of processing the category of personal data concerned, the recipient or category of recipients of personal data, information on the transfer of personal data to third countries, the period of retention of personal data, authorized administrators of personal data, the source of processed personal data, and whether and how automated decision-making and profiling takes place. You have the right to get copies of the processed personal data.

Right to correct your data

If you find that the personal data we are processing is out of date or inaccurate, please let us know on the below mentioned contacts and we will fix it immediately.

Right to erase your data

In some legally established cases such as when the purpose of the processing has ceased to exist or if you withdraw your consent and we no longer have any other legal basis for the processing of your personal data or if you have objected to the processing we are obliged to delete your personal data. In this regard, however, we would like to point out that the right to erase your data does not concern the personal data we need to meet legal obligations or to protect our legitimate interests. We are therefore forced to evaluate each such request individually, as in some cases the administrator has a duty or a legitimate interest to keep the personal data.

Right to object

If we process your personal data on behalf of our legitimate interest, you have the right to object to this processing to the relevant supervisory authority which is the Personal Data Protection Office.

Right to limit processing

In special cases such as the objection to the processing of personal data or the questioning of the accuracy and correctness of your personal data, you have the right to request a limitation of such processing. In this case, the data is tagged, stored and is not processed further.

Right to data portability

If you have given us your consent to the processing of your personal data or the processing of your personal data is based on an agreement you have entered into with us and the processing of your data is automated, you have the right to obtain the personal data you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to ask us to hand them over to another administrator if this is technically feasible.

Right not to be the subject of an automated decision

You have the right not to be the subject of any decision based solely on automated processing, including profiling, which has legal effects for you or is of significant consequence to you in a similar manner. This does not apply if you give your consent to automated decision-making, including profiling; or if it is necessary to conclude a contract or if it is permitted by law.

Who and how can you contact?

If you have any additional questions regarding the processing of your personal data or if you wish to exercise any of your rights, we are here for you at the following contacts: